There aren't any "REAL" threats as far as viruses go for a Linux server. There are however vulnerabilities that can be exploited if you aren't paying attention.
Here's what we do:
1. Make sure only the software that is absolutely required is installed on the server. This can be difficult because some pieces of software are installed because another piece of software requires it's libraries. Refer to #2
2. Make sure that only the services that are required for the server to do it's job are running. For example if you don't need CUPS (Print Server) - disable it.
3. Monitor the vulnerabilities of the services that you are running closely and update quickly. This becomes increasingly difficult with an application - as updates tend to break application code
4. Firewall if you are running something like SSH - try to have your firewall administrator source restrict where ever possible. For example you are only going to allow XYZ.com to access the SSH server, all other traffic is denied. You should also configure the servers firewall (iptables) to act as a secondary firewall in the case that someone gets past the main hardware firewalls - this way your machines have an extra layer of protection. Restrict what the server can do as well - either by iptables, hardware firewall or both. This way if the server does get compromised, it will be limited in what it can actually do from the inside of your network out.
5. turn on logging - by default if someone is trying to SSH to the server and is failing, SSH will log the failed attempts, you will need to turn up the systems accounting to track users who actually have access.
Hope this helps!
Main Topics
Browse All Topics
by: travis87Posted on 2009-09-02 at 20:50:05ID: 25247729
That is a community question, like does a MAC need anti-virus. The answer may lie in what you are using it for. If it will be a public server it will be at a higher risk for any attack than a private server.
At the end of the day they make Anti-virus for Ubuntu, so it is suseptable to attack. What your threat level is depends on your setup. Anything can be attacked, including Anti-Virus programs.
Here is an AVG discusion about this topic: https://help.ubuntu.com/co